# Releases Soffid 3



# 2025 september

## 2025-09-24

- **Syncserver 3.6.39**  
    
    - Fix account identification upon kerberos token
- **ESSO 3.5.35-enterprise**  
    
    - Allow administrator login when system is offline
- **PAM (only in Docker Hub) 1.4.59**  
    
    - Query environment property to not to compute used disk storage

## 2025-09-17  


- **Consola 3.6.45**  
    
    - Fixed error when importing users in the users tab of the role view
- **Syncserver 3.6.38**  
    
    - Fix query of single host
    - Do not store logs for deleted agents
    - Improve test method for agents
    - Add timeout in connection to gateway server
    - Allow weak crypto algorithms
    - Query of hosts now returns the serial number
    - Ignore old tasks during schedule phase
    - Fix compilation error
    - Fix kerberos agent connection
    - Fix kubernetes saver
    - Improve kerberos login performance
- **Federation addon 3.6.55**  
    
    - Do not register hosts without user agent
    - Do not create sessions for clients without user agent
    - Improve expiration of oauth tokens
- **Recover Password addon 3.0.16**  
    
    - Fix password recovery from ESSO
    - Fix error with legacy ESSO
    - Fix send mail without user attributes
- **Report addon 3.0.20**  
    
    - Do not execute reports on disabled tenants
- **Domino connector 2.3.2**  
    
    - Added triggers
    - Added remove objects
    - Enable additional FullNames
- **Windows connector 5.4.31**  
    
    - Change permissions to set passwords
    - Allow weak crypto algorithms for kerberos
    - Fix undelete method

# 2025 octubre

## 2025-10-29

- **Consola 3.6.49**  
    
    - Do not update account's last login after ten minutes
    - Improve method to search for hosts
    - Use hashtable instead of Hashmap
    - Fix exception dump
    - Update last login date in a separate transaction
    - Fix page to search for groups
- **Federation addon 3.6.63**  
    
    - Attributes cache
    - Only update last login every ten minutes
    - User remote service locator to use local services
    - Verify post\_logout\_redirect\_uri is valid
    - Fix CAS SAML endpoint
- **BPM addon 3.2.4**  
    
    - Fix null pointer when there is no grant
- **PAM (only in Docker Hub) 1.4.64**  
    
    - Fix osKeyboard does not exist

## 2025-10-22

- **Syncserver 3.6.42**  
    
    - Fix update password tasks are ignored
    - Reduce locks in sessions table
- **Federation addon 3.6.59**  
    
    - Fix CAS / SAML1 endpoint
    - Remove synchronization requirements
- **PAM (only in Docker Hub) 1.4.63**  
    
    - Improve kubernetes file manager
    - Large file transfer in kubernetes

## 2025-10-15

- **Federation addon 3.6.57**  
    
    - Change SAML date format
- **LDAP connector 2.8.2**  
    
    - Fix user logon error
- **PAM (only in Docker Hub) 1.4.61**  
    
    - Update client access
    - Update chrome image
    - Change VNC keyboard behaviour

## 2025-10-08

- **Consola 3.6.46**  
    
    - Remove serial numbers when the machine is marked as deleted
    - Prevent duplicates in email field #513
    - Improve performance of new-task page
- **Federation addon 3.6.56**  
    
    - Add SAML1.1 bridge for CAS
- **ESSO 3.5.37-enterprise**  
    
    - Store password cache
    - Switch to offline login if online login fails

## 2025-10-01

- **ESSO 3.5.36-enterprise**  
    
    - URL decode received password for administrator login
- **PAM (only in Docker Hub) 1.4.60**  
    
    - Remove directory path from name when downloading a file

# 2025 november

## 2025-11-26

- **Consola 3.6.52**  
    
    - Changes for mariadb / mysql divergence
    - Create user with attributes in authoritative loader engine
- **Federation addon 3.6.65**  
    
    - Allow post or get
    - Change SCM
- **SQL connector 1.7.13**  
    
    - Add iSeries driver
    - Add driver for SQL Anywhere
    - Update JDK
- **PAM (only in Docker Hub) 1.4.70**  
    
    - Improve http image to add custom scripts
    - Update preferences every 10 seconds
    - Fix international backslash key

## 2025-11-19

- **LDAP connector 2.8.3**  
    
    - Add ldap filter property

## 2025-11-12

- **Consola 3.6.50**  
    
    - Fix message compositions
    - Improve jump server monitoring
- **Federation addon 3.6.64**  
    
    - Increase buffer size
    - Prevent NullPointer during logout
- **PAM (only in Docker Hub) 1.4.68**  
    
    - VNC Reconnection
    - Only count non-closed sessions
    - Handle induced closing
    - Reset keyboard when the focus is lost
    - Add option to share static data with client pods

## 2025-11-05

- **PAM (only in Docker Hub) 1.4.65**  
    
    - Add vm support in https
    - Do not loop in RDP connections
    - Fix tab and caps lock

# 2025 december

## 2025-12-31

- **LDAP connector 2.8.4**  
    
    - Fix smart grant mechanism
- **ESSO 3.5.40-enterprise**  
    
    - Fix dialog resource

## 2025-12-24

- **Federation addon 3.6.69**  
    
    - Do not fail when the kerberos token is not acceptable
    - Fix login endpoint for CAS
    - Fix value too long when accepting external IdPs
    - Fix account attribute generation
- **Report addon 3.0.21**  
    
    - Fix report generation
    - ESSO 3.5.39-enterprise
    - Add support for disabling ESSO login on startup

## 2025-12-17

- **Consola 3.6.58**  
    
    - Option to not to store user credentials
    - Allow manual launcher when passwords are not stored
    - Fix method to switch to manual login on PAM
    - Fix method to guess network
- **Syncserver 3.6.45**  
    
    - Only store passwords when the password policy allows it
- **Federation addon 3.6.67**  
    
    - Prevent dead-lock
    - Support unsafe CAS profile
    - Fix multiple values stored for same account
- **ESSO 3.5.38-enterprise**  
    
    - Let the user to change the user name for privilege escalation
- **PAM (only in Docker Hub) 1.4.77**  
    
    - Fix method to send large clipboard contents, like images

## 2025-12-10

- **Consola 3.6.56**  
    
    - Check changes in authoritative engine
    - Set the right network for a host whose IP address has changed
    - Fix compilation error
    - Fix method to assing IP address when the network is full
    - Add scroll in process page
- **Syncserver 3.6.44**  
    
    - Fix process to remove old tasks
- **Recertification addon 3.0.9**  
    
    - Notification process
    - Improve user experience
    - Add email notifications
    - Fix recertification cannot be completed when the recertified role has been revoked
- **PAM (only in Docker Hub) 1.4.76**  
    
    - Methods to get and set clipboard
    - Apply look and feel of version 4
    - Methods to close sessions
    - Fix javascript error
    - Add client access
    - Add DBeaver data
    - Add MariaDB drivers
    - Update dbeaver drivers
    - Fix index process is stalled

## 2025-12-03

- **Consola 3.6.53**  
    
    - Add mysql driver
- **Syncserver 3.6.43**  
    
    - Add mysql driver
- **PAM (only in Docker Hub) 1.4.74**  
    
    - Add new drivers
    - Fix method to change keyboard
    - Fix keyboard problem in some old operating systems
    - Allow IAMGE\_REPOSITORY environment variable
    - Accept persistent volume claim
    - Unpress left control when sending altgr

# 2026 january

## 2026-01-07

- **Console 3.6.60**  
    
    - Fix attachments list overlaps process buttons
    - Create service for pam-ssh gateway without password vault
    - Improve performance for users with many holder groups
    - Default group for holdergroups
- **Syncserver 3.6.46**  
    
    - Implement pam proxy service

## 2026-01-14

- **Federation addon 3.6.71**   
    
    - Add debugging to SSO process
    - Fix for the automatic deletion process of oauth tokens

## 2026-01-21

- **Recover password addon 3.0.17**  
    
    - Enlarge table to fill in recovery questions #18
    - Display the minimum answers to fill-in #19
- **REST connector 1.2.25**  
    
    - Support for sending JSON requests with JSON arrays as values
    - Fix null pointer
- **PAM (only in Docker Hub) 1.4.80**  
    
    - Do not check spice protocol anymore
    - Fix process froze running docker inspect
    - Remove backslashes from downloaded file name
    - Fix images are not uploaded on time
    - Expire sessions after 48 hours
    - Fix file transfer icon
    - Prevent recording tail is incomplete
    - Do not cache images or scripts
    - Disable cache
    - Fix password encoding in authorzation header
    - Pause keyboard during login process
    - Improve resuming of paused session

## 2026-01-28

- **Console 3.6.61**  
    
    - Fix retrieval of non-user accounts identity
- **REST connector 1.3.0**  
    
    - Fix null pointer
    - Upgrade configuration

# 2026 february

## 2026-02-04

- **Console 3.6.62**  
    
    - Fix retrieval of non-user accounts identity
- **Federation addon 3.6.73**  
    
    - Add token index
    - Improve CAS Response URL
    - Mark authentication as MFA for microsoft

## 2026-02-11

- **Federation addon 3.6.74**  
    
    - Do not send response to unauthorized URL
    - Expose third party idp attributes

## 2026-02-18

- **Console 3.6.64**  
    
    - Socket for SYSLOG SSL
    - Changes for paswordless ssh-gateway
    - Add octet-length framing in syslog
- **Federation addon 3.6.75**  
    
    - Set default authentication method

## 2026-02-24

- **Console 3.6.65**  
    
    - Fix warning getting user passwords switch
- **Federation addon 3.6.76**  
    
    - Get session from cache for SSO
- **ESSO 3.5.43**  
    
    - Second step to sign components
    - Update .gitlab-ci.yml file
    - Change execution attributes
    - Fix signing tool

# 2026 march

## 2026-03-04

- **Console 3.6.66**  
    
    - Flush syslog message

## 2026-03-18

- **Federation addon 3.6.80**  
    
    - Method to specify loa in CAS request
    - Method to disable creation of accounts for 3rd party IdPs
    - Add gateway option for CAS Login
    - Method to set a custom lists of holder groups
    - Fix consent page
    - Relax CAS Host validation

## 2026-03-25

- **Console 3.6.69**  
    
    - Fail on signature corruption
- **Federation addon 3.6.83**  
    
    - Method to set a custom lists of holder groups
    - Fix: assertion or response must be signed
    - Improve security fix
    - Throw error when the signature is wrong

# 2026 april

## 2026-04-22

- **Console 3.6.72**  
    
    - Switch to disable local authentication
    - Fix method to jump into soffid console
    - Fixes problem due to secure class loaders
- **Federation addon 3.6.87**  
    
    - Secure XML injection
    - feat: Make LOA a driver for adaptive authentication
    - Reauthenticate when loa level raises
    - Fix null pointer exception
- **ESSO 3.5.45-enterprise**  
    
    - perf: Update all settings at once
    - Fix host address was not updated